[Samba] Passwords expiring

Scott Mayo sgmayo at mail.bloomfield.k12.mo.us
Thu Nov 17 14:18:04 GMT 2005


Andrew Bartlett wrote:
> On Mon, 2005-11-07 at 14:48 -0600, Scott Mayo wrote:
> 
>>I have a Samba 3 server setup using LDAP for the backend.  I keep 
>>getting a message that the passwords will expire.  This happened about a 
>>month ago and I did not worry about it, because my XP machines kept 
>>telling me this last year, but they never expired.  I figured it was 
>>something to do with XP and not my Samba server.  This year though, with 
>>my new server, they did expire and I had to reset them all.  I thought I 
>>went through and had it set where they would not expire.  Maybe I did 
>>and they will not, just like last year, but if they do, what do I need 
>>to do so they do not expire?
>>
>>Here is what I did when I reset them.  I used the smbldap-usermod 
>>program to change the expire time to a long, long time away.
>>
>>smbldap-usermod -e "2999-01-01 01:01:01" -A 0 username
>>
>>Shouldn't that tell it to make the passwords to expire on January 1, 2999?
> 
> 
> Firstly, I would not set it to any date past 2037.  10 years should be
> long enough for a password, and not catch problems with time_t overflow.
> 
> Andrew Bartlett
> 

Well, they did expire, so now I have changed my script to make them 
expire in the year 2014.  I hope this is the problem.  Here is what I 
did inside my perl script.  I will post the whole line in case someone 
see that I formatted my code wrong.

Also, is there anyway to actually look at when a users expiration date 
is after it has been set?  If I can do that, then I will know if this is 
getting it set correctly.

smbldap-usermod -e \"2014-01-01 01\:01\:01\" -A 0 $username

I just backslahed the " and the : to make sure they were not causing a 
problem.

Thanks for the help.

-- 
Scott Mayo
Technology Coordinator
Bloomfield Schools
PH: 573-568-5669
FA: 573-568-4565
Pager: 800-264-2535 X2549

Duct tape is like the force, it has a light side and a dark side and it
holds the universe together.


More information about the samba mailing list